@kensio/yulin 0.31.0 → 0.33.0

package/dist/service/iam/credential/sim-iam-access-key.js

@@ -0,0 +1,57 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+/**
+ * A simulated AWS access key associated with an authenticated principal.
+ *
+ * Access keys can represent either long-lived credentials or temporary
+ * credentials backed by a session.
+ */
+export class SimIamAccessKey {
+    accessKeyId;
+    secretAccessKey;
+    principal;
+    identityPolicyPrincipal;
+    session;
+    createDate;
+    status;
+    constructor(props) {
+        this.accessKeyId = props.accessKeyId;
+        this.secretAccessKey = props.secretAccessKey;
+        this.principal = props.principal;
+        this.identityPolicyPrincipal =
+            props.identityPolicyPrincipal ?? props.principal;
+        this.session = props.session;
+        this.createDate = new Date(props.createDate ?? Date.now());
+        this.status = props.status ?? "Active";
+    }
+    /**
+     * Whether a secret access key matches this access key.
+     */
+    matchesSecretAccessKey(secretAccessKey) {
+        return this.secretsMatch(secretAccessKey, this.secretAccessKey);
+    }
+    /**
+     * Whether a session token matches this access key's temporary session.
+     */
+    matchesSessionToken(sessionToken) {
+        return (this.session !== undefined &&
+            sessionToken !== undefined &&
+            this.secretsMatch(sessionToken, this.session.sessionToken));
+    }
+    /**
+     * Return the authenticated identity represented by this access key.
+     */
+    identity() {
+        return {
+            principal: this.principal,
+            identityPolicyPrincipal: this.identityPolicyPrincipal,
+            role: this.session?.role,
+            session: this.session,
+        };
+    }
+    secretsMatch(actual, expected) {
+        const actualHash = createHash("sha256").update(actual).digest();
+        const expectedHash = createHash("sha256").update(expected).digest();
+        return timingSafeEqual(actualHash, expectedHash);
+    }
+}
+//# sourceMappingURL=sim-iam-access-key.js.map

package/dist/service/iam/credential/sim-iam-access-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-access-key.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-access-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAkB1D;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACV,WAAW,CAAS;IACpB,eAAe,CAAS;IACxB,SAAS,CAAkB;IAC3B,uBAAuB,CAAkB;IACzC,OAAO,CAA6B;IACpC,UAAU,CAAO;IAC1B,MAAM,CAAwB;IAErC,YAAY,KAA2B;QACrC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACrC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,uBAAuB;YAC1B,KAAK,CAAC,uBAAuB,IAAI,KAAK,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,eAAuB;QAC5C,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,YAAgC;QAClD,OAAO,CACL,IAAI,CAAC,OAAO,KAAK,SAAS;YAC1B,YAAY,KAAK,SAAS;YAC1B,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;YACrD,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;QAChE,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QAEpE,OAAO,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;CACF"}

package/dist/service/iam/credential/sim-iam-credential-registry.d.ts

@@ -0,0 +1,21 @@
+import type { SimAwsCredentials, SimIamCredentialIdentity } from "./sim-aws-credentials.js";
+import type { SimIamAccessKey } from "./sim-iam-access-key.js";
+/**
+ * Stores and authenticates simulated IAM access keys.
+ *
+ * The registry is deliberately agnostic about the principal type represented
+ * by an access key. Temporary sessions and future IAM-user access keys share
+ * the same lookup and authentication behavior.
+ */
+export declare class SimIamCredentialRegistry {
+    private readonly accessKeys;
+    /**
+     * Register a new simulated access key.
+     */
+    registerAccessKey(accessKey: SimIamAccessKey): void;
+    /**
+     * Authenticate credentials and resolve their simulated AWS identity.
+     */
+    resolve(credentials: SimAwsCredentials, now?: Date): SimIamCredentialIdentity;
+}
+//# sourceMappingURL=sim-iam-credential-registry.d.ts.map

package/dist/service/iam/credential/sim-iam-credential-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-credential-registry.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-credential-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAM/D;;;;;;GAMG;AACH,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAsC;IAEjE;;OAEG;IACH,iBAAiB,CAAC,SAAS,EAAE,eAAe,GAAG,IAAI,CAMlD;IAED;;OAEG;IACH,OAAO,CACL,WAAW,EAAE,iBAAiB,EAC9B,GAAG,GAAE,IAAiB,GACrB,wBAAwB,CAgE1B;CACF"}

package/dist/service/iam/credential/sim-iam-credential-registry.js

@@ -0,0 +1,75 @@
+import { SimIamDuplicateAccessKey, SimIamInvalidCredentials, } from "./error/sim-iam-credential.error.js";
+/**
+ * Stores and authenticates simulated IAM access keys.
+ *
+ * The registry is deliberately agnostic about the principal type represented
+ * by an access key. Temporary sessions and future IAM-user access keys share
+ * the same lookup and authentication behavior.
+ */
+export class SimIamCredentialRegistry {
+    accessKeys = new Map();
+    /**
+     * Register a new simulated access key.
+     */
+    registerAccessKey(accessKey) {
+        if (this.accessKeys.has(accessKey.accessKeyId)) {
+            throw new SimIamDuplicateAccessKey(accessKey.accessKeyId);
+        }
+        this.accessKeys.set(accessKey.accessKeyId, accessKey);
+    }
+    /**
+     * Authenticate credentials and resolve their simulated AWS identity.
+     */
+    resolve(credentials, now = new Date()) {
+        const accessKey = this.accessKeys.get(credentials.accessKeyId);
+        if (accessKey === undefined) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: credentials.accessKeyId,
+                reason: "unknown-access-key",
+            });
+        }
+        if (accessKey.status !== "Active") {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: credentials.accessKeyId,
+                reason: "inactive-access-key",
+                accessKeyStatus: accessKey.status,
+            });
+        }
+        if (!accessKey.matchesSecretAccessKey(credentials.secretAccessKey)) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: credentials.accessKeyId,
+                reason: "secret-access-key-mismatch",
+            });
+        }
+        if (accessKey.session !== undefined &&
+            credentials.sessionToken === undefined) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: credentials.accessKeyId,
+                reason: "session-token-missing",
+            });
+        }
+        if (accessKey.session === undefined &&
+            credentials.sessionToken !== undefined) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: credentials.accessKeyId,
+                reason: "session-token-unexpected",
+            });
+        }
+        if (accessKey.session !== undefined &&
+            !accessKey.matchesSessionToken(credentials.sessionToken)) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: credentials.accessKeyId,
+                reason: "session-token-mismatch",
+            });
+        }
+        if (accessKey.session?.isExpired(now) === true) {
+            throw new SimIamInvalidCredentials({
+                accessKeyId: credentials.accessKeyId,
+                reason: "expired-session",
+                expiration: accessKey.session.expiration,
+            });
+        }
+        return accessKey.identity();
+    }
+}
+//# sourceMappingURL=sim-iam-credential-registry.js.map

package/dist/service/iam/credential/sim-iam-credential-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-credential-registry.js","sourceRoot":"","sources":["../../../../src/service/iam/credential/sim-iam-credential-registry.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,qCAAqC,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,OAAO,wBAAwB;IAClB,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEjE;;OAEG;IACH,iBAAiB,CAAC,SAA0B;QAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,wBAAwB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,OAAO,CACL,WAA8B,EAC9B,GAAG,GAAS,IAAI,IAAI,EAAE;QAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAE/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,oBAAoB;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,qBAAqB;gBAC7B,eAAe,EAAE,SAAS,CAAC,MAAM;aAClC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,4BAA4B;aACrC,CAAC,CAAC;QACL,CAAC;QAED,IACE,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,WAAW,CAAC,YAAY,KAAK,SAAS,EACtC,CAAC;YACD,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,CAAC;QAED,IACE,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,WAAW,CAAC,YAAY,KAAK,SAAS,EACtC,CAAC;YACD,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,0BAA0B;aACnC,CAAC,CAAC;QACL,CAAC;QAED,IACE,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,SAAS,CAAC,mBAAmB,CAAC,WAAW,CAAC,YAAY,CAAC,EACxD,CAAC;YACD,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,wBAAwB;aACjC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,IAAI,wBAAwB,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,MAAM,EAAE,iBAAiB;gBACzB,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,UAAU;aACzC,CAAC,CAAC;QACL,CAAC;QAED,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/dist/service/iam/credential/user/sim-iam-user-credential-generator.d.ts

@@ -0,0 +1,20 @@
+export interface SimIamUserCredentials {
+    readonly accessKeyId: string;
+    readonly secretAccessKey: string;
+}
+/**
+ * Generates long-lived credentials for a simulated IAM user.
+ */
+export interface SimIamUserCredentialGenerator {
+    generate(): SimIamUserCredentials;
+}
+/**
+ * Default random IAM-user credential generator.
+ */
+export declare class SimIamRandomUserCredentialGenerator implements SimIamUserCredentialGenerator {
+    /**
+     * Generate sim access key ID and secret access key for sim IAM User.
+     */
+    generate(): SimIamUserCredentials;
+}
+//# sourceMappingURL=sim-iam-user-credential-generator.d.ts.map

package/dist/service/iam/credential/user/sim-iam-user-credential-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-user-credential-generator.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/credential/user/sim-iam-user-credential-generator.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,IAAI,qBAAqB,CAAC;CACnC;AAED;;GAEG;AACH,qBAAa,mCAAoC,YAAW,6BAA6B;IACvF;;OAEG;IACH,QAAQ,IAAI,qBAAqB,CAMhC;CACF"}

package/dist/service/iam/credential/user/sim-iam-user-credential-generator.js

@@ -0,0 +1,16 @@
+import { faker } from "@faker-js/faker";
+/**
+ * Default random IAM-user credential generator.
+ */
+export class SimIamRandomUserCredentialGenerator {
+    /**
+     * Generate sim access key ID and secret access key for sim IAM User.
+     */
+    generate() {
+        return {
+            accessKeyId: `AKIA${faker.string.alphanumeric({ length: 16 })}`.toUpperCase(),
+            secretAccessKey: faker.string.alphanumeric({ length: 40 }),
+        };
+    }
+}
+//# sourceMappingURL=sim-iam-user-credential-generator.js.map

package/dist/service/iam/credential/user/sim-iam-user-credential-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-user-credential-generator.js","sourceRoot":"","sources":["../../../../../src/service/iam/credential/user/sim-iam-user-credential-generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAcxC;;GAEG;AACH,MAAM,OAAO,mCAAmC;IAC9C;;OAEG;IACH,QAAQ;QACN,OAAO;YACL,WAAW,EACT,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE;YAClE,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;SAC3D,CAAC;IACJ,CAAC;CACF"}

package/dist/service/iam/error/sim-iam-caller-identifier.d.ts

@@ -0,0 +1,25 @@
+import type { SimAwsPrincipal } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * Converts a simulated AWS principal into the identifier displayed in IAM
+ * authorization error messages.
+ *
+ * Simulated principals use a discriminated union because each principal kind
+ * stores its identifier in a different property. Keeping that mapping here
+ * prevents IAM error classes from needing to understand every principal shape.
+ *
+ * The returned values follow the existing error-message format:
+ *
+ * - anonymous callers use the literal `anonymous`;
+ * - ARN principals use their complete ARN;
+ * - AWS service principals use their service name.
+ *
+ * Add handling here when a new principal kind is introduced so all IAM
+ * authorization diagnostics continue to identify callers consistently.
+ */
+export declare class SimIamCallerIdentifier {
+    /**
+     * Return the human-readable identifier for one simulated AWS principal.
+     */
+    format(caller: SimAwsPrincipal): string;
+}
+//# sourceMappingURL=sim-iam-caller-identifier.d.ts.map

package/dist/service/iam/error/sim-iam-caller-identifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-caller-identifier.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/error/sim-iam-caller-identifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAE1E;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,sBAAsB;IACjC;;OAEG;IACH,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAUtC;CACF"}

package/dist/service/iam/error/sim-iam-caller-identifier.js

@@ -0,0 +1,32 @@
+/**
+ * Converts a simulated AWS principal into the identifier displayed in IAM
+ * authorization error messages.
+ *
+ * Simulated principals use a discriminated union because each principal kind
+ * stores its identifier in a different property. Keeping that mapping here
+ * prevents IAM error classes from needing to understand every principal shape.
+ *
+ * The returned values follow the existing error-message format:
+ *
+ * - anonymous callers use the literal `anonymous`;
+ * - ARN principals use their complete ARN;
+ * - AWS service principals use their service name.
+ *
+ * Add handling here when a new principal kind is introduced so all IAM
+ * authorization diagnostics continue to identify callers consistently.
+ */
+export class SimIamCallerIdentifier {
+    /**
+     * Return the human-readable identifier for one simulated AWS principal.
+     */
+    format(caller) {
+        if (caller.kind === "anonymous") {
+            return "anonymous";
+        }
+        if (caller.kind === "arn") {
+            return caller.arn;
+        }
+        return caller.service;
+    }
+}
+//# sourceMappingURL=sim-iam-caller-identifier.js.map

package/dist/service/iam/error/sim-iam-caller-identifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-caller-identifier.js","sourceRoot":"","sources":["../../../../src/service/iam/error/sim-iam-caller-identifier.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,sBAAsB;IACjC;;OAEG;IACH,MAAM,CAAC,MAAuB;QAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,GAAG,CAAC;QACpB,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF"}

package/dist/service/iam/error/sim-iam.error.d.ts

@@ -0,0 +1,68 @@
+import type { SimAwsPrincipal } from "../../aws/caller/sim-aws-caller.js";
+/**
+ * Minimal metadata shape for simulated IAM errors.
+ */
+export interface SimIamErrorMetadata {
+    readonly httpStatusCode?: number;
+}
+/**
+ * Base class for simulated IAM errors.
+ */
+export declare class SimIamError extends Error {
+    readonly $metadata: SimIamErrorMetadata;
+    constructor(message: string, $metadata?: SimIamErrorMetadata);
+}
+/**
+ * Details of an IAM authorization failure.
+ */
+export interface SimIamAccessDeniedInput {
+    readonly principal: SimAwsPrincipal;
+    readonly action: string;
+    readonly resource: string;
+}
+/**
+ * Simulated IAM AccessDenied error.
+ */
+export declare class SimIamAccessDenied extends SimIamError {
+    readonly name = "AccessDenied";
+    readonly caller: SimAwsPrincipal;
+    readonly action: string;
+    readonly resource: string;
+    /**
+     * Build an AWS-style authorization failure.
+     *
+     * Caller formatting is delegated because principal variants store their
+     * identifiers differently. This class remains responsible for the IAM error
+     * contract: message structure, HTTP metadata, and diagnostic properties.
+     */
+    constructor(input: SimIamAccessDeniedInput);
+}
+/**
+ * Simulated IAM NoSuchEntity error.
+ */
+export declare class SimIamNoSuchEntity extends SimIamError {
+    readonly name = "NoSuchEntity";
+    constructor(message: string);
+}
+/**
+ * Simulated IAM EntityAlreadyExists error.
+ */
+export declare class SimIamEntityAlreadyExists extends SimIamError {
+    readonly name = "EntityAlreadyExists";
+    constructor(message: string);
+}
+/**
+ * Simulated IAM InvalidMarker error.
+ */
+export declare class SimIamInvalidMarkerException extends SimIamError {
+    readonly name = "InvalidMarkerException";
+    constructor(message: string);
+}
+/**
+ * Simulated IAM MalformedPolicyDocument error.
+ */
+export declare class SimIamMalformedPolicyDocument extends SimIamError {
+    readonly name = "MalformedPolicyDocument";
+    constructor(message: string);
+}
+//# sourceMappingURL=sim-iam.error.d.ts.map

package/dist/service/iam/error/sim-iam.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam.error.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/error/sim-iam.error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAG1E;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;aAGlB,SAAS,EAAE,mBAAmB;IAFhD,YACE,OAAO,EAAE,MAAM,EACC,SAAS,GAAE,mBAAwB,EAGpD;CACF;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,SAAyB,IAAI,kBAAkB;IAE/C,SAAgB,MAAM,EAAE,eAAe,CAAC;IACxC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,SAAgB,QAAQ,EAAE,MAAM,CAAC;IAEjC;;;;;;OAMG;IACH,YAAY,KAAK,EAAE,uBAAuB,EAYzC;CACF;AAED;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,SAAyB,IAAI,kBAAkB;IAE/C,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,WAAW;IACxD,SAAyB,IAAI,yBAAyB;IAEtD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,4BAA6B,SAAQ,WAAW;IAC3D,SAAyB,IAAI,4BAA4B;IAEzD,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF;AAED;;GAEG;AACH,qBAAa,6BAA8B,SAAQ,WAAW;IAC5D,SAAyB,IAAI,6BAA6B;IAE1D,YAAY,OAAO,EAAE,MAAM,EAE1B;CACF"}

package/dist/service/iam/error/sim-iam.error.js

@@ -0,0 +1,72 @@
+import { SimIamCallerIdentifier } from "./sim-iam-caller-identifier.js";
+/**
+ * Base class for simulated IAM errors.
+ */
+export class SimIamError extends Error {
+    $metadata;
+    constructor(message, $metadata = {}) {
+        super(message);
+        this.$metadata = $metadata;
+    }
+}
+/**
+ * Simulated IAM AccessDenied error.
+ */
+export class SimIamAccessDenied extends SimIamError {
+    name = "AccessDenied";
+    caller;
+    action;
+    resource;
+    /**
+     * Build an AWS-style authorization failure.
+     *
+     * Caller formatting is delegated because principal variants store their
+     * identifiers differently. This class remains responsible for the IAM error
+     * contract: message structure, HTTP metadata, and diagnostic properties.
+     */
+    constructor(input) {
+        const iamCallerIdentifier = new SimIamCallerIdentifier();
+        const callerIdentifier = iamCallerIdentifier.format(input.principal);
+        super(`User: ${callerIdentifier} is not authorized to perform: ${input.action} on resource: ${input.resource}`, { httpStatusCode: 403 });
+        this.caller = input.principal;
+        this.action = input.action;
+        this.resource = input.resource;
+    }
+}
+/**
+ * Simulated IAM NoSuchEntity error.
+ */
+export class SimIamNoSuchEntity extends SimIamError {
+    name = "NoSuchEntity";
+    constructor(message) {
+        super(message, { httpStatusCode: 404 });
+    }
+}
+/**
+ * Simulated IAM EntityAlreadyExists error.
+ */
+export class SimIamEntityAlreadyExists extends SimIamError {
+    name = "EntityAlreadyExists";
+    constructor(message) {
+        super(message, { httpStatusCode: 409 });
+    }
+}
+/**
+ * Simulated IAM InvalidMarker error.
+ */
+export class SimIamInvalidMarkerException extends SimIamError {
+    name = "InvalidMarkerException";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+/**
+ * Simulated IAM MalformedPolicyDocument error.
+ */
+export class SimIamMalformedPolicyDocument extends SimIamError {
+    name = "MalformedPolicyDocument";
+    constructor(message) {
+        super(message, { httpStatusCode: 400 });
+    }
+}
+//# sourceMappingURL=sim-iam.error.js.map

package/dist/service/iam/error/sim-iam.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam.error.js","sourceRoot":"","sources":["../../../../src/service/iam/error/sim-iam.error.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AASxE;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB,SAAS;IAF3B,YACE,OAAe,EACC,SAAS,GAAwB,EAAE;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;yBAFC,SAAS;IAG3B,CAAC;CACF;AAWD;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxB,IAAI,GAAG,cAAc,CAAC;IAE/B,MAAM,CAAkB;IACxB,MAAM,CAAS;IACf,QAAQ,CAAS;IAEjC;;;;;;OAMG;IACH,YAAY,KAA8B;QACxC,MAAM,mBAAmB,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACzD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAErE,KAAK,CACH,SAAS,gBAAgB,kCAAkC,KAAK,CAAC,MAAM,iBAAiB,KAAK,CAAC,QAAQ,EAAE,EACxG,EAAE,cAAc,EAAE,GAAG,EAAE,CACxB,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxB,IAAI,GAAG,cAAc,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/B,IAAI,GAAG,qBAAqB,CAAC;IAEtD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,4BAA6B,SAAQ,WAAW;IAClC,IAAI,GAAG,wBAAwB,CAAC;IAEzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,6BAA8B,SAAQ,WAAW;IACnC,IAAI,GAAG,yBAAyB,CAAC;IAE1D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/service/iam/index.d.ts

@@ -0,0 +1,2 @@
+export { SimIam } from "./sim-iam.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/service/iam/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/service/iam/index.js

@@ -0,0 +1,2 @@
+export { SimIam } from "./sim-iam.js";
+//# sourceMappingURL=index.js.map

package/dist/service/iam/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/service/iam/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.d.ts

@@ -0,0 +1,31 @@
+import type { SimIamPolicyDocument, SimIamPolicyDocumentCondition, SimIamPolicyDocumentPrincipal, SimIamPolicyDocumentStatement } from "../sim-iam-policy.js";
+export interface SimIamParsedPolicyDocument {
+    readonly statements: readonly SimIamParsedPolicyStatement[];
+}
+export interface SimIamParsedPolicyStatement {
+    readonly source: SimIamPolicyDocumentStatement;
+    readonly sid?: string | undefined;
+    readonly effect: "Allow" | "Deny";
+    readonly actions?: readonly string[] | undefined;
+    readonly notActions?: readonly string[] | undefined;
+    readonly resources?: readonly string[] | undefined;
+    readonly notResources?: readonly string[] | undefined;
+    readonly principal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly notPrincipal?: SimIamPolicyDocumentPrincipal | undefined;
+    readonly condition?: SimIamPolicyDocumentCondition | undefined;
+}
+/**
+ * Parse raw IAM policy document shapes into a form convenient for evaluation.
+ *
+ * IAM policy JSON commonly allows either a single value or an array. The decision
+ * engine should not need to care which source shape was used.
+ */
+export declare class SimIamPolicyDocumentParser {
+    /**
+     * Parse a sim IAM Policy Document into a form convenient for evaluation.
+     */
+    parse(policy: SimIamPolicyDocument): SimIamParsedPolicyDocument;
+    private parseStatement;
+    private stringList;
+}
+//# sourceMappingURL=sim-iam-doc-parser.d.ts.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,EAC7B,6BAA6B,EAC9B,MAAM,sBAAsB,CAAC;AAG9B,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC7D;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,YAAY,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;CAChE;AAED;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,oBAAoB,GAAG,0BAA0B,CAM9D;IAED,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,UAAU;CAanB"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts

@@ -0,0 +1,7 @@
+import { StaticFactory } from "@kensio/part-factory";
+import type { SimIamParsedPolicyStatement } from "./sim-iam-doc-parser.js";
+/**
+ * Generates parsed IAM policy statements for tests.
+ */
+export declare const simIamParsedPolicyStatementFactory: StaticFactory<SimIamParsedPolicyStatement>;
+//# sourceMappingURL=sim-iam-doc-parser.factory.d.ts.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.factory.d.ts","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE3E;;GAEG;AACH,eAAO,MAAM,kCAAkC,4CAU3C,CAAC"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.js

@@ -0,0 +1,15 @@
+import { StaticFactory } from "@kensio/part-factory";
+/**
+ * Generates parsed IAM policy statements for tests.
+ */
+export const simIamParsedPolicyStatementFactory = new StaticFactory({
+    source: {
+        Effect: "Allow",
+        Action: "s3:GetObject",
+        Resource: "arn:aws:s3:::test-bucket/test-key",
+    },
+    effect: "Allow",
+    actions: ["s3:GetObject"],
+    resources: ["arn:aws:s3:::test-bucket/test-key"],
+});
+//# sourceMappingURL=sim-iam-doc-parser.factory.js.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.factory.js","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD;;GAEG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,IAAI,aAAa,CAA8B;IAC7C,MAAM,EAAE;QACN,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,cAAc;QACtB,QAAQ,EAAE,mCAAmC;KAC9C;IACD,MAAM,EAAE,OAAO;IACf,OAAO,EAAE,CAAC,cAAc,CAAC;IACzB,SAAS,EAAE,CAAC,mCAAmC,CAAC;CACjD,CAAC,CAAC"}

package/dist/service/iam/policy/parse/sim-iam-doc-parser.js

@@ -0,0 +1,41 @@
+import { simIamPolicyDocumentStatements } from "../sim-iam-pol-doc-statements.js";
+/**
+ * Parse raw IAM policy document shapes into a form convenient for evaluation.
+ *
+ * IAM policy JSON commonly allows either a single value or an array. The decision
+ * engine should not need to care which source shape was used.
+ */
+export class SimIamPolicyDocumentParser {
+    /**
+     * Parse a sim IAM Policy Document into a form convenient for evaluation.
+     */
+    parse(policy) {
+        return {
+            statements: simIamPolicyDocumentStatements(policy).map((statement) => this.parseStatement(statement)),
+        };
+    }
+    parseStatement(statement) {
+        return {
+            source: statement,
+            sid: statement.Sid,
+            effect: statement.Effect,
+            actions: this.stringList(statement.Action),
+            notActions: this.stringList(statement.NotAction),
+            resources: this.stringList(statement.Resource),
+            notResources: this.stringList(statement.NotResource),
+            principal: statement.Principal,
+            notPrincipal: statement.NotPrincipal,
+            condition: statement.Condition,
+        };
+    }
+    stringList(value) {
+        if (value === undefined) {
+            return undefined;
+        }
+        if (typeof value === "string") {
+            return [value];
+        }
+        return [...value];
+    }
+}
+//# sourceMappingURL=sim-iam-doc-parser.js.map

package/dist/service/iam/policy/parse/sim-iam-doc-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-doc-parser.js","sourceRoot":"","sources":["../../../../../src/service/iam/policy/parse/sim-iam-doc-parser.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAmBlF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IACrC;;OAEG;IACH,KAAK,CAAC,MAA4B;QAChC,OAAO;YACL,UAAU,EAAE,8BAA8B,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACnE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAC/B;SACF,CAAC;IACJ,CAAC;IAEO,cAAc,CACpB,SAAwC;QAExC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;YAChD,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC9C,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC;YACpD,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAC;IACJ,CAAC;IAEO,UAAU,CAChB,KAA6C;QAE7C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;CACF"}

package/dist/service/iam/policy/sim-iam-pol-doc-statements.d.ts

@@ -0,0 +1,7 @@
+import type { SimIamPolicyDocument, SimIamPolicyDocumentStatement } from "./sim-iam-policy.js";
+/**
+ * Return the policy document statements as an array, regardless of whether the
+ * source document used the single-statement or statement-array shape.
+ */
+export declare function simIamPolicyDocumentStatements(policyDocument: SimIamPolicyDocument): readonly SimIamPolicyDocumentStatement[];
+//# sourceMappingURL=sim-iam-pol-doc-statements.d.ts.map

package/dist/service/iam/policy/sim-iam-pol-doc-statements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-pol-doc-statements.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-pol-doc-statements.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EACpB,6BAA6B,EAC9B,MAAM,qBAAqB,CAAC;AAI7B;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,cAAc,EAAE,oBAAoB,GACnC,SAAS,6BAA6B,EAAE,CAgB1C"}

package/dist/service/iam/policy/sim-iam-pol-doc-statements.js

@@ -0,0 +1,21 @@
+import { SimIamMalformedPolicyDocument } from "../error/sim-iam.error.js";
+/**
+ * Return the policy document statements as an array, regardless of whether the
+ * source document used the single-statement or statement-array shape.
+ */
+export function simIamPolicyDocumentStatements(policyDocument) {
+    const policyStatement = policyDocument.Statement;
+    // JSON parse can still produce null at runtime
+    // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+    if (policyStatement === undefined || policyStatement === null) {
+        throw new SimIamMalformedPolicyDocument("IAM policy document must define Statement");
+    }
+    if (isSimIamPolicyStatementArray(policyStatement)) {
+        return policyStatement;
+    }
+    return [policyStatement];
+}
+function isSimIamPolicyStatementArray(policyStatement) {
+    return Array.isArray(policyStatement);
+}
+//# sourceMappingURL=sim-iam-pol-doc-statements.js.map

package/dist/service/iam/policy/sim-iam-pol-doc-statements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-pol-doc-statements.js","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-pol-doc-statements.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,2BAA2B,CAAC;AAQ1E;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,cAAoC;IAEpC,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC;IAEjD,+CAA+C;IAC/C,uEAAuE;IACvE,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,6BAA6B,CACrC,2CAA2C,CAC5C,CAAC;IACJ,CAAC;IAED,IAAI,4BAA4B,CAAC,eAAe,CAAC,EAAE,CAAC;QAClD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,eAAe,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,4BAA4B,CACnC,eAA2C;IAE3C,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AACxC,CAAC"}

package/dist/service/iam/policy/sim-iam-policy-arn.d.ts

@@ -0,0 +1,16 @@
+import type { SimAwsAccountId } from "../../aws/sim-aws-account.js";
+import type { SimIamPolicyId, SimIamPolicyName } from "./sim-iam-policy.js";
+import type { SimArn } from "../../aws/arn.js";
+/**
+ * Make a sim IAM policy ARN.
+ */
+export declare function makeSimPolicyArn(props: {
+    readonly accountId: SimAwsAccountId;
+    readonly path: string;
+    readonly policyName: SimIamPolicyName;
+}): SimArn;
+/**
+ * Make a sim IAM policy ID.
+ */
+export declare function makeSimPolicyId(): SimIamPolicyId;
+//# sourceMappingURL=sim-iam-policy-arn.d.ts.map

package/dist/service/iam/policy/sim-iam-policy-arn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-iam-policy-arn.d.ts","sourceRoot":"","sources":["../../../../src/service/iam/policy/sim-iam-policy-arn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;CACvC,GAAG,MAAM,CAET;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,cAAc,CAKhD"}